curl-library
Re: [libmicrohttpd] SSL handshake fails between libcurl and libgnutls/MHD
From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 24 Jan 2012 00:06:09 +0100 (CET)
Date: Tue, 24 Jan 2012 00:06:09 +0100 (CET)
On Tue, 24 Jan 2012, Nikos Mavrogiannopoulos wrote:
> Note however that the combination of the cipher ARCFOUR with SSL 3.0 and TLS
> 1.0 is not vulnerable to these attacks. Thus a string to use when SSL 3.0 is
> required could be
> "NORMAL:-VERS-TLS-ALL:+VERS-SSL3.0:-CIPHER-ALL:+ARCFOUR-128".
Is ARCFOUR more likely to work with old/buggy servers than the "hacks" you
mentioned?
-- / daniel.haxx.se ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.htmlReceived on 2012-01-24